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Disposition of Claims 

4) [3 Claim(s) 1-22 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) [ is/are allowed. 

6) H Claim(s) 1-22 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) [3 The drawing(s) filed on 01 October 2003 is/are: a)03 accepted or b)D objected to by the Examiner. 
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DETAILED ACTION 

This action is in response to the papers filed 10/01/2003. Claims 1-22 were 
received for consideration. No preliminary amendments for the claims were filed. 
Currently claims 1-22 are under consideration. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claim 1-6, 9-16, 18, and 19-22 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Ober et al. (U.S. Patent # 6,397,331 ). Ober teaches with respect to 
claims 1 and 1 1 , a computing device for securely executing authorized code, said 
computing device comprising: a protected memory (see column 2 line 4 - column 2 line 
19 i.e protected memory, secure memory or secure kernel memory) for storing 
authorized code (see column 2 line 4 - column 2 line 19 i.e control code), which 
contains an original digital signature (see column 1 line 53 - column 4 line 5); and a 
processor in signal communication with said protected memory for preparing to execute 
code from the protected memory by verifying that a digital signature contained in said 
code is original in accordance with a public key, and if said original digital signature is 
verified, then branching to a copy of said authorized code in said protected memory to 
begin execution (see column 1 line 53 - column 4 line 5). 
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With respect to claims 2 and 12, protected memory is cryptographically protected 
(see column 1 line 53 - column 4 line 5). 

With respect to claims 3 and 13, the integrity of the contents of said protected 
memory is protected by encryption (see column 1 line 53 - column 4 line 5). 

With respect to claims 4 and 14, protected memory is physically protected (see 
column 1 line 53 - column 4 line 5). 

With respect to claims 5 and 15, public key is stored in said protected memory. 

With respect to claims 6 and 16, at least one of the integrity of said authorized 
code and the privacy of said authorized code is protected at run time (see column 1 line 
53 - column 4 line 5). 

With respect to claims 9 and 20, the protected memory stores code with an 
original digital signature corresponding to an Owner Public Key (see column 1 line 53 - 
column 4 line 5); and the processor verifies the Owner Public Key in accordance with a 
Manufacturer Public Key, which is resident on the processor, and then verifies the 
original digital signature in accordance with the Owner Public Key (see column 1 line 53 
- column 4 line 5). 

With respect to claims 10 and 21 , reading means for reading a Certificate 
containing an Owner Public Key (see column 1 line 53 - column 4 line 5); validation 
means for validating the Certificate with the Manufacturer Public Key (see column 1 line 
53 - column 4 line 5); matching means for finding the Owner Public Key in the 
Certificate that matches the Owner Number in the processor (see column 1 line 53 - 
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column 4 line 5); and verification means for using the matched Owner Public Key to 
verify the authorized code (see column 1 line 53 - column 4 line 5). 

With respect to claim 18, the privacy of said authorized code is protected at run 
time (see column 1 line 53 - column 4 line 5). 

With respect to claim 22, a program storage device readable by machine, 
tangibly embodying a program of instructions executable by the machine to perform 
program steps for ensuring that a processor will execute only authorized code, the 
program steps comprising: applying an original digital signature to all authorized code 
(see column 1 line 53 - column 4 line 5); storing said signed authorized code in a 
protected memory (see column 1 line 53 - column 4 line 5); preparing to execute code 
from the protected memory by verifying a digital signature used to sign said code in 
accordance with a public key, which corresponds to said original digital signature (see 
column 1 line 53 - column 4 line 5); and branching to a copy of said authorized code in 
said protected memory to begin execution if said original digital signature is verified (see 
column 1 line 53 - column 4 line 5). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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Claim 7, 8, 17, and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Ober et al. (U.S. Patent # 6,397,331) in view of Fordet al (U.S. Patent # 5,481,613). 
Ober teaches everything with respect to claim 6, 16 and 18 above but with respect to 
claims 7 and 17, Ober teaches that the integrity of authorized code is protected with 
asymmetric key encryption and does not teach the use of symmetric key encryption. 
Ford teaches symmetric key encryption (see column 2 line 45-50). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have replaced the asymmetric key of Ober with a 
symmetric keys for lower processing overheads and its ability to encryption/decryption 
of large volumes of data (see Ford column 2 lines 45-50). 

With respect to claims 8 and 19, Ober teaches the privacy of said authorized 
code is protected at run time with an asymmetric key encryption and does not teach the 
use of symmetric key encryption. Ford teaches symmetric key encryption (see column 2 
line 45-50). It would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains to have replaced the 
asymmetric key of Ober with a symmetric keys for lower processing overheads and its 
ability to encryption/decryption of large volumes of data (see Ford column 2 lines 45- 
50). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is 571-270- 
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1018. The examiner can normally be reached on Monday-Thursday from 7:30 A.M. to 
5:00 P.M. The examiner can also be reached on alternate Fridays from 7:30 A.M. to 
4:00 P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Devin Almeida 
Patent Examiner 
11/29/2006 
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